[Debian-med-packaging] Bug#1021513: centrifuge: reproducible builds: Embeds build time and hostname in centrifuge-build-bin

Vagrant Cascadian vagrant at reproducible-builds.org
Sun Oct 9 23:30:45 BST 2022


Source: centrifuge
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: hostname timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The time and hostname are embedded in /usr/lib/centrifuge/centrifuge-build-bin:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/centrifuge.html

  ionos5-amd64
  vs.
  i-capture-the-hostname
  
  Fri·Nov·10·04:07:04·-12·2023
  vs.
  Sat·Oct··8·23:46:23·+14·2022

The attached patch to the upstream Makefile fixes this by setting a
place holder value for BUILD_HOST and uses SOURCE_DATE_EPOCH for
BUILD_TIME.

According to my local tests, with this patch applied, centrifuge should
build reproducibly on tests.reproducible-builds.org!

Thanks for maintaining centrifuge!

live well,
  vagrant
 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Makefile-Use-consistent-build-time-and-build-host.patch
Type: text/x-diff
Size: 912 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/debian-med-packaging/attachments/20221009/a78ede81/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/debian-med-packaging/attachments/20221009/a78ede81/attachment.sig>


More information about the Debian-med-packaging mailing list